CVE-2010-20103
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The ba
CVSS
9.8
Crítica
EPSS
15.0%
p97
KEV
—
Exploit Today
29
0-100
Publicado: 20 de ago. de 2025 · Última mod.: 15 de jul. de 2026 · CWE-912
13.7%EPSS · 30 dias15.0%
2026-10-142026-11-11
A malicious backdoor was embedded in the official ProFTPD 1.3.3c source tarball distributed between November 28 and December 2, 2010. The backdoor implements a hidden FTP command trigger that, when invoked, causes the server to execute arbitrary shell commands with root privileges. This allows remote, unauthenticated attackers to run any OS command on the FTP server host.
- www.proftpd.orghttp://www.proftpd.org/
- advisories.checkpoint.comhttps://advisories.checkpoint.com/defense/advisories/public/2011/cpai-2010-151.html/
- github.comhttps://github.com/proftpd/proftpd
- raw.githubusercontent.comhttps://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rb
- web.archive.orghttps://web.archive.org/web/20111107212129/http://rsync.proftpd.org/
- www.exploit-db.comhttps://www.exploit-db.com/exploits/15662
- www.exploit-db.comhttps://www.exploit-db.com/exploits/16921
- www.vulncheck.comhttps://www.vulncheck.com/advisories/proftpd-backdoor-command-execution
- raw.githubusercontent.comhttps://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/unix/ftp/proftpd_133c_backdoor.rb
- www.exploit-db.comhttps://www.exploit-db.com/exploits/15662
- www.exploit-db.comhttps://www.exploit-db.com/exploits/16921
CVECVSSEPSSKEVRExploitTítuloMod.
CVE-2026-112169—4.3%
——1Magistra software contains undocumented backdoor functionality that allows authentication bypass and the creation of a privileged user account without credential verification.3dCVE-2026-1185799.8 CRÍ56.6%
——17A weakness has been identified in D-Link DIR-505 1.10B02. The impacted element is the function main of the file /secmark1524.cgi of the component Web Management CGI. This manipulation of the argument accu/pass/code/hash/cmds causes backdoor. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks.14dCVE-2026-114353—4.7%
——1Hidden functionality (undocumented backdoor) in the root-privileged 'assistant' daemon in DJI CrystalSky ZS600C firmware v0.3.9.7 through v0.6.6.9 on Android allows a physically-present attacker with USB access to execute arbitrary OS commands as root by sending the hard-coded magic string 'dji26656677' to the USB-gadget serial interface (/dev/ttyGS0), after which each subsequent line is passed to system().15dCVE-2026-976277.2 ALT32.1%
——10Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may execute arbitrary OS commands.23dCVE-2026-1007374.9 MÉD18.5%
——6Hidden functionality issue exists in Multiple DVRs (Digital Video Recorders) provided by Atsumi Electric Co., Ltd. A user who can log in to the product with the administrator privilege may upgrade the affected product to unauthorized firmware.23dCVE-2026-1123608.0 ALT42.2%
——13A security vulnerability has been detected in Netis EAP930 1.250905.115454. This issue affects the function return200 of the file /cgi-bin/debug of the component CGI Endpoint. The manipulation of the argument SIGNATURE leads to backdoor. The attack may be initiated remotely. A high degree of complexity is needed for the attack. The exploitability is assessed as difficult. The vendor was contacted early about this disclosure but did not respond in any way.23d